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EXAMINER'S ANSWER 



This is in response to the appeal brief filed 4/29/2008 appealing from the Office 
action mailed 10/30/2007. 
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(1) Real Party in Interest 

A statement identifying by name the real party in interest is contained in the brief 

(2) Related Appeals and Interferences 

The following are the related appeals, interferences, and judicial proceedings 
known to the examiner which may be related to, directly affect or be directly affected by 
or have a bearing on the Board's decision in the pending appeal. 

(3) Status of Claims 

The statement of the status of claims contained in the brief is correct. 

(4) Status of Amendments After Final 
No amendment after final has been filed. 

(5) Summary of Claimed Subject Matter 

The summary of claimed subject matter contained in the brief is correct. 

(6) Grounds of Rejection to be Reviewed on Appeal 

The appellant's statement of the grounds of rejection to be reviewed on appeal is 
correct. 

(7) Claims Appendix 

The copy of the appealed claims contained in the Appendix to the brief is correct. 

(8) Evidence Relied Upon 

5,793,952 Limsico 8-1998 

5,105,438 Ackroff 4-1992 

5,606,663 Kadooka 2-1997 
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(9) Grounds of Rejection 

The following ground(s) of rejection are applicable to the appealed claims: 
Claim Rejections - 35 USC § 103 

Claims 1-10 and 12-29 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Limsico (U.S. Patent # 5,793,952) in view of Ackroff (U.S. Patent # 
5,1 05,438) in further view of Kadooka (U.S. Patent # 5,606,663). The Limsico (U.S. 
Patent # 5,793,952) reference with respect to claim 1 teaches a password management 
system, comprising a graphical user interface logic residing on a first computer system 
(see figure 3 element 310) operable to receive a current password from a user, prompt 
the user to determine whether the user desires to change the current password, and 
responsive to the user response receive a new password (see figure 3 and column 3 
line 42-54). Password confirmation logic residing on a first computer system operable to 
confirm the current password associated with the user on a remote computer system 
residing on a second computer system (see figure 3 element 350) remote from the first 
computer system (see figure 3); password administration logic residing on a first 
computer system, responsive to the password confirmation logic and the graphical user 
interface, operable to receive the new password and to change the current password on 
the remote computer system (see figure 2 and column 4 line 57 - column 5 line 54). 
The Limsico reference does not teach that the remote computer system is a switched 
access remote test system (SARTS) and expiration logic residing on a first computer 
system operable to determine if the current password is approaching its expiration prior 
to logging onto the switched access remote test system residing on a second computer 
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system and is operable to cause the user to be prompted to change the current 
password if the current password is determined to be approaching its expiration. The 
Ackroff reference teaches that the remote computer system is a switched access 
remote test system (see column 3 line 18-29). It would have been obvious at the time 
the invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have made the remote computer system taught by Limsico to be a 
switched access remote test system as discussed by Ackroff. SARTS providides a data 
base of circuit configurations and other key information, and in combination with a 
human interface for accessing circuits, issues test commands and receives 
measurements. The test equipment is not local to the circuit that is in trouble as it is 
more economical to make the test from a remotely centralized location (see column 1 
lines 44-50). Therefore one would have been motivated to include a switched access 
remote test system on a password manager that is operable to change the current 
password at determined time or when the user request a change of password to keep 
the Switched access remote test system secure and only qualified user access to the 
switched access remote test system. The Kadooka reference teaches expiration logic 
residing on a second computer system operable to determine if the current password is 
approaching its expiration prior to logging onto the switched access remote test system 
residing on a second computer system remote from the first computer system and is 
operable to cause the user to be prompted to change the current password if the current 
password is determined to be approaching its expiration (see figure 4a). It would have 
been obvious at the time the invention was made to a person having ordinary skill in the 
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art to which said subject matter pertains to make it possible to set the available period 
on the system side for each password according to the access frequency of the user 
whom the password identifies, prescribe a password updating period for a certain length 
of time immediately preceding the expiration of the available period, inform the user who 
logs in the system during the updating period that the expiration of his password is 
imminent by displaying a message requesting him to change his password, and thereby 
urge him to update his password. Therefore one would be motivated to warn the user 
and set different length updating periods so a user who seldom accesses the system 
does not become unable to log in the system because his password has run out of its 
available period even if he never accessed the system during that period (see Kadooka 
column 1 lines 38-58). 

With respect to claim 2, the password confirmation logic is operable to send the 
current password to the switched access remote test system (i.e remote machine as 
taught by Ackroff) and receive a response from the switched access remote test system 
(i.e remote machine as taught by Ackroff also see Limsico column 5 line 43 - column 6 
line 65). 

With respect to claim 3, the password confirmation logic is operable to compare 
the response with a plurality of expected responses and determine whether the current 
password provided by the user is valid (see Limsico column 6 lines 5-28). 

With respect to claim 4, the response is an alphanumeric string, and the plurality 
of expected responses comprises erroneous responses and successful responses (see 
Limsico column 5 line 43 - column 7 line 16). 
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With respect to claim 5, the password confirmation logic is operable to instruct 
the graphical user interface logic to provide any of a plurality of error messages to the 
user upon the password confirmation logic determining that the current password 
provided by the user is not valid (see Limsico figure 5B elements 5160, 5190, and 5310 
"Display Error Message" and column 5 line 43 - column 6 line 54). 

With respect to claim 6, the password administration logic performs a password 
change upon receiving a request to change the password from the graphical user 
interface (see Limsico column 5 line 43-54). 

With respect to claim 7, the password administration logic performs a password 
change upon receiving a confirmation of the password from the password confirmation 
logic (see Limsico figure 5C element 5250 "Display Verify Password GUI" and column 6 
lines 18-39). 

With respect to claim 8, the password administration logic is operable to send the 
current password and the new password to the switched access remote test system (i.e 
remote machine as taught by Ackroff) and receive a response from the switched access 
remote test system (i.e remote machine as taught by Ackroff), and compare the 
response to a plurality of expected responses (see Limsico column 5 lines 43 and 
column 7 lines 16). 

With respect to claim 9, the password administration logic is operable to instruct 
the graphical user interface logic to provide any of a plurality of error messages to the 
user upon the password administration logic determining that the new password 
provided by the user was not accepted by the switched access remote test system (see 
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Limsico figure 5 elements 5160, 5190, and 5310 "Display Error Message" and column 5 
line 43 - column 6 line 54). 

With respect to claim 10, the Limsico reference further comprises a password file 
operable to store a set of data comprising the expiration date of the current password; 
wherein the expiration logic is operable to read the password file and request that the 
graphical user interface notify the user that the current password is nearing expiration 
responsive to the expiration date (see Limsico column 9 line 5-40). 

With respect to claim 12 and 21 , the Limsico reference teaches, a method of 
managing passwords, comprising the steps of providing a user with a graphical user 
interface residing on a first computer system (see figure 3 element 310). Receiving a 
current password from the user via the graphical user interface for a remote computer 
system residing on a second computer system (see figure 3 element 350) remote from 
the first computer system. Prompting the user on whether to change the current 
password, receiving a new password from the user responsive to the user response to 
the prompting (see figure 3 and column 3 lines 41-54 and column 4 line 57 - column 5 
line 2). Confirming the current password with the remote computer system and 
requesting that the remote computer system change the password responsive to the 
user response to the prompting (see column 5 line 43 - column 6 line 65). The Limsico 
reference does not teach that the remote computer system is a switched access remote 
test system and determining at the first computer system if the current password is 
approaching its expiration prior to logging onto the switched access remote test system 
residing on a second computer system. The Ackroff reference teaches that the remote 
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computer system is a switched access remote test system (see column 3 line 18-29). It 
would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains to have made the remote 
computer system taught by Limsico to be a switched access remote test system as 
discussed by Ackroff. SARTS providides a data base of circuit configurations and other 
key information, and in combination with a human interface for accessing circuits, 
issues test commands and receives measurements. The test equipment is not local to 
the circuit that is in trouble as it is more economical to make the test from a remotely 
centralized location (see column 1 lines 44-50). Therefore one would be motivated to 
include a switched access remote test system on a password manager that is operable 
to change the current password at determined time or when the user request a change 
of password to keep the Switched access remote test system secure and only qualified 
user access to the switched access remote test system. The Kadooka reference 
teaches determining at the first computer system if the current password is approaching 
its expiration prior to logging onto the switched access remote test system residing on a 
second computer system (see figure 4a). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to make it possible to set the available period on the system side for 
each password according to the access frequency of the user whom the password 
identifies, prescribe a password updating period for a certain length of time immediately 
preceding the expiration of the available period, inform the user who logs in the system 
during the updating period that the expiration of his password is imminent by displaying 
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a message requesting him to change his password, and thereby urge him to update his 
password. Therefore one would be motivated to warn the user and set different length 
updating periods so a user who seldom accesses the system does not become unable 
to log in the system because his password has run out of its available period even if he 
never accessed the system during that period (see Kadooka column 1 lines 38-58). 

With respect to claims 13 and 22, the confirming the current password further 
comprises sending the current password to the switched access remote test system (i.e 
remote machine as taught by Ackroff) and receiving a response from the switched 
access remote test system (i.e remote machine as taught by Ackroff also see Limsico 
column 5 line 43 - column 6 line 65 and column 7 line 46 - column 9 line 15). 

With respect to claims 14 and 23, the confirming the current password further 
comprises comparing the response from the switched access remote test system with a 
plurality of expected responses (see Limsico column 5 lines 43 - column 7 lines 16). 

With respect to claims 15 and 24, the confirming the current password further 
comprises notifying the user of an error responsive to comparing the response from the 
switched access remote test system (see Limsico column 5 line 43 - column 6 line 65 
i.e. an error message is displayed at step 5310). 

With respect to claims 16 and 25, the requesting that the switched access remote 
test system (i.e remote machine as taught by Ackroff) change the password responsive 
to the user response to the prompting further comprises sending the new password to 
the switched access remote test system (i.e remote machine as taught by Ackroff) along 
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with the current password (see Limsico column 4 line 57 - column 5 line 12 and column 
8 line 58-63). 

With respect to claims 17 and 26, the requesting that the switched access remote 
test (i.e remote machine as taught by Ackroff) system change the password responsive 
to the user response to the prompting further comprises receiving a response from the 
switched access remote test system (i.e remote machine as taught by Ackroff) after 
sending the new password (see Limsico column and column 1 1 lines 6-10). 

With respect to claims 18 and 27, further comprising the step of comparing the 
received response with a plurality of expected responses (see Limsico column 5 line 43 
- column 7 line 16). 

With respect to claims 19 and 28, further comprising the step of providing an 
error message to the user responsive to the comparing the received response (see 
Limsico figure 5 elements 5160, 5190, and 5310 "Display Error Message" and column 5 
line 43 - column 6 line 54). 

With respect to claims 20 and 29, further comprising the steps of reading a 
password file to determine an expiration date associated with the current password and 
prompting the user to change the password responsive to determination of the 
expiration date (see Limsico column 9 lines 5-40). 

Claim 11 is rejected under 35 U.S.C. 103(a) as being unpatentable over Limsico 
(U.S. Patent # 5,793,952) in view of Ackroff (U.S. Patent # 5,105,438) in view of 
Kadooka (U.S. Patent # 5,606,663) in further view of Goldberg et al (U.S. Patent # 
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5,748,890). Limsico in view of Ackroff teaches everything with respect to claim 1 above 
but with respect to claim 1 1 the Limsico in view of Achroff does not teaches a password 
management system is operable to interact with at least two switched access remote 
testing systems through a second graphical user interface that forms a wrapper for said 
at least two switched access remote testing system. Goldberg teaches a password 
management system is operable to interact with at least two switched access remote 
testing systems (i.e remote machine as taught by Limsico in view of Ackroff) through a 
second graphical user interface that forms a wrapper for said at least two switched 
access remote testing system (i.e remote machine as taught by Limsico in view of 
Ackroff, also see Goldberg column 1 lines 26-67). It would have been obvious at the 
time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains to have modified a remote password management system that 
would be able to interact with at least two host. Therefore one would have been 
motivated to design a password management system that could be use interact with at 
least two host to make it easier and more secure then having one password for each 
host. Trying to remember different passwords for each host is very time consuming, 
expensive, and ineffective from an accountably standpoint. Have one system would 
have made it a lot easier than having books with host applications and corresponding 
passwords (see column 1 lines 13-55). 
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(10) Response to Argument 

In response to applicant's arguments against the references individually, one 
cannot show nonobviousness by attacking references individually where the rejections 
are based on combinations of references. See In re Keller, 642 F.2d 413, 208 
USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 USPQ 375 (Fed. Cir. 
1986). 

Applicants arguments with respect to "expiration logic residing on a second 
computer system operable to determine if the current password is approaching its 
expiration prior to logging onto the switched access remote test system residing on a 
second computer system remote from the first computer system and is operable to 
cause the user to be prompted to change the current password if the current password 
is determined to be approaching its expiration" have been considered but are not 
persuasive. Limsico in view of Kadooka clearly teaches "expiration logic residing on a 
first computer system operable to determine if the current password is approaching its 
expiration prior to logging onto the switched access remote test system residing on a 
second computer system and is operable to cause the user to be prompted to change 
the current password if the current password is determined to be approaching its 
expiration". Limsico teaches a local machine (i.e. first computer) with a password GUI 
operable to change a user's password on a remote computer system (i.e. second 
computer). Kadooka teaches to determine if the current password is approaching its 
expiration prior to logging onto the switched access remote test system residing on a 
second computer system (Limsico's remote machine) and is operable to cause the user 
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to be prompted to change the current password if the current password is determined to 
be approaching its expiration (see figure 4a). It is clearly shown that determine if the 
current password is approaching its expiration (steps 4-2 - 4-6) is prior to logging on 
(step 4-9). The combination of Limsico in view of Kadooka teaches the whole claim of 
"expiration logic residing on a second computer system operable to determine if the 
current password is approaching its expiration prior to logging onto the switched access 
remote test system residing on a second computer system remote from the first 
computer system and is operable to cause the user to be prompted to change the 
current password if the current password is determined to be approaching its 
expiration". 

(11) Related Proceeding(s) Appendix 

No decision rendered by a court or the Board is identified by the examiner in the 

Related Appeals and Interferences section of this examiner's answer. 

For the above reasons, it is believed that the rejections should be sustained. 

Respectfully submitted, 

/Devin Almeida/ 
Examiner, Art Unit 2132 

/Gilberto Barron Jr/ 

Supervisory Patent Examiner, Art Unit 2132 

Conferees: 

/Gilberto Barron Jr/ 

Supervisory Patent Examiner, Art Unit 2132 

/Matthew Smithers/ 
Primary Examiner, AU 2137 



